modules/bastion/main.tf

resource "azurerm_public_ip" "bastion_pip" {
  name                = "bastion_pip"
  location            = var.location
  resource_group_name = var.resource_group_name
  allocation_method   = "Static"
  sku                 = "Standard"
  ip_tags             = {}
  zones               = ["1", "2", "3"]
  tags                = var.tags
}

resource "azurerm_bastion_host" "bastion" {
  name                = var.azurebastion_name
  location            = var.location
  resource_group_name = var.resource_group_name
  tags                = var.tags

  ip_configuration {
    name                 = "configuration"
    subnet_id            = var.azurebastion_subnet_id
    public_ip_address_id = azurerm_public_ip.bastion_pip.id
  }
}